This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft File: A2G_1FDhLplUBKROs3ovnkK_4Hw.mft (raw, json) Hash identifier: 2D6LI0FIqV1TgzSR53rPmB7P4XeHr78PkbYTDPm7vWM= Subject key identifier: F8:8E:DD:E0:32:72:57:98:9C:13:05:BB:35:C0:CD:C5:90:D4:08:D4 Authority key identifier: 03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C Certificate issuer: /CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c Certificate serial: 019B1014B0F218DF47761F6F613F792981B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft Manifest number: 03F2 Signing time: Fri 12 Dec 2025 01:02:29 +0000 Manifest this update: Fri 12 Dec 2025 01:02:29 +0000 Manifest next update: Sat 13 Dec 2025 01:02:29 +0000 Files and hashes: 1: A2G_1FDhLplUBKROs3ovnkK_4Hw.crl (hash: 6/rOxaQxr5iqZCR9cWVkrQXDECnIfB6WxLhrwrKzyTs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Dec 2025 23:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:10:14:b0:f2:18:df:47:76:1f:6f:61:3f:79:29:81:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0361bfd450e12e995404a44eb37a2f9e42bfe07c Validity Not Before: Dec 12 01:02:29 2025 GMT Not After : Dec 13 01:02:29 2025 GMT Subject: CN=f88edde0327257989c1305bb35c0cdc590d408d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:49:fd:0e:fb:e9:1f:84:e9:e4:e5:36:17:25: ef:67:44:d9:f8:b8:d0:62:36:f2:76:bc:cc:cb:ad: 2f:99:b7:e3:5c:8c:cb:2b:10:b4:06:56:8f:7e:67: ce:8d:7d:6f:39:0c:14:bf:9c:11:57:84:8d:72:62: fa:7b:16:7c:ab:97:ec:7c:cd:14:8e:a6:ec:dc:ea: fe:69:d5:48:76:87:72:f3:46:76:d5:64:5d:bf:35: 97:bd:d1:e4:3b:6f:80:28:66:8e:c1:4c:d4:f8:9f: 28:a2:a9:19:23:98:79:d7:0c:d2:75:fa:56:25:9d: c1:0f:59:ae:0d:53:71:83:2b:02:aa:cc:9b:49:6e: 3b:2f:c5:13:cc:29:ea:31:0e:0e:46:2a:fb:ec:e4: 3d:6e:4a:b7:b9:69:6f:55:cd:04:3d:fa:ce:df:9f: 8e:84:71:47:f1:cb:84:46:f8:a5:96:65:de:e7:bd: 11:03:5d:1b:bc:dd:c6:96:73:50:d8:e2:5b:ab:31: d6:41:e5:41:e7:8f:16:0b:b6:ec:b4:96:51:c7:2d: 60:08:d1:38:9f:6c:68:ff:3a:67:d4:1e:d7:31:cd: 50:83:e2:5e:9d:be:35:19:7c:32:2e:a4:d9:83:17: 6a:3e:ba:18:fe:cd:f3:8a:76:b8:03:db:71:e2:be: bc:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:8E:DD:E0:32:72:57:98:9C:13:05:BB:35:C0:CD:C5:90:D4:08:D4 X509v3 Authority Key Identifier: keyid:03:61:BF:D4:50:E1:2E:99:54:04:A4:4E:B3:7A:2F:9E:42:BF:E0:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2G_1FDhLplUBKROs3ovnkK_4Hw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/bec783-5b48-4938-87e7-7371b7d1a107/1/A2G_1FDhLplUBKROs3ovnkK_4Hw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:47:00:7d:48:f2:b9:44:d4:dc:94:fb:90:1c:3c:cc:35:8f: 57:db:d5:b2:ad:0e:1b:9d:73:74:9d:e1:56:b1:ca:93:59:b2: 40:5f:90:4c:dd:0f:24:ae:9e:c0:e0:ae:70:68:37:83:75:0e: ec:1d:73:f2:ea:3a:84:3c:a2:c7:32:29:68:3a:7f:0f:86:89: 47:4b:33:e7:fa:4c:32:f2:63:bc:db:49:37:01:05:21:e6:54: 1d:02:6f:99:10:a3:15:86:8c:a7:86:a5:48:bf:75:56:58:c8: 81:38:8a:27:f4:7d:1b:87:23:94:95:1d:85:66:52:36:b1:8e: 90:ce:94:fe:04:8e:50:3c:a4:79:0d:ac:83:80:c6:23:98:0b: eb:f4:bd:9f:ef:a8:d4:4d:06:32:80:6e:59:c1:51:89:59:23: 00:5a:27:bd:cf:a7:fe:89:bb:d3:00:fe:c7:16:35:24:25:3a: e6:b5:6a:49:f8:39:b9:2c:05:df:07:7b:1a:63:7f:8d:f6:7e: 23:4d:85:fb:3c:45:24:77:5e:2b:6b:8d:b6:41:5f:4b:fd:18: ad:43:bc:e4:75:03:a4:81:ac:c3:89:48:43:f2:a5:af:1b:ed: c4:e6:20:f1:da:38:a4:62:6f:bd:7d:b4:8f:84:55:0b:ec:36: 40:1a:d4:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsQFLDyGN9Hdh9vYT95KYG1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAzNjFiZmQ0NTBlMTJlOTk1NDA0YTQ0ZWIzN2EyZjllNDJi ZmUwN2MwHhcNMjUxMjEyMDEwMjI5WhcNMjUxMjEzMDEwMjI5WjAzMTEwLwYDVQQD EyhmODhlZGRlMDMyNzI1Nzk4OWMxMzA1YmIzNWMwY2RjNTkwZDQwOGQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0n9DvvpH4Tp5OU2FyXvZ0TZ+LjQ YjbydrzMy60vmbfjXIzLKxC0BlaPfmfOjX1vOQwUv5wRV4SNcmL6exZ8q5fsfM0U jqbs3Or+adVIdody80Z21WRdvzWXvdHkO2+AKGaOwUzU+J8ooqkZI5h51wzSdfpW JZ3BD1muDVNxgysCqsybSW47L8UTzCnqMQ4ORir77OQ9bkq3uWlvVc0EPfrO35+O hHFH8cuERvillmXe570RA10bvN3GlnNQ2OJbqzHWQeVB548WC7bstJZRxy1gCNE4 n2xo/zpn1B7XMc1Qg+Jenb41GXwyLqTZgxdqProY/s3zina4A9tx4r68CwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPiO3eAycleYnBMFuzXAzcWQ1AjUMB8GA1UdIwQY MBaAFANhv9RQ4S6ZVASkTrN6L55Cv+B8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTct NzM3MWI3ZDFhMTA3LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi9iZWM3ODMtNWI0OC00OTM4LTg3ZTctNzM3MWI3ZDFhMTA3 LzEvQTJHXzFGRGhMcGxVQktST3Mzb3Zua0tfNEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0cAfUjy uUTU3JT7kBw8zDWPV9vVsq0OG51zdJ3hVrHKk1myQF+QTN0PJK6ewOCucGg3g3UO 7B1z8uo6hDyixzIpaDp/D4aJR0sz5/pMMvJjvNtJNwEFIeZUHQJvmRCjFYaMp4al SL91VljIgTiKJ/R9G4cjlJUdhWZSNrGOkM6U/gSOUDykeQ2sg4DGI5gL6/S9n++o 1E0GMoBuWcFRiVkjAFonvc+n/om70wD+xxY1JCU65rVqSfg5uSwF3wd7GmN/jfZ+ I02F+zxFJHdeK2uNtkFfS/0YrUO85HUDpIGsw4lIQ/KlrxvtxOYg8do4pGJvvX20 j4RVC+w2QBrUXg== -----END CERTIFICATE-----Generated at Fri Dec 12 09:10:28 2025 by rpki-client